Vulnerability Details CVE-2023-0455
Unrestricted Upload of File with Dangerous Type in GitHub repository unilogies/bumsys prior to v1.0.3-beta.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.04
EPSS Ranking 87.8%
CVSS Severity
CVSS v3 Score 7.6
References
- http://packetstormsecurity.com/files/172674/Bumsys-Business-Management-System-1.0.3-beta-Shell-Upload.html
- https://github.com/unilogies/bumsys/commit/a5beff7868ab63bf4ec752a1102f8da033c66b28
- https://huntr.dev/bounties/b5e9c578-1a33-4745-bf6b-e7cdb89793f7
- http://packetstormsecurity.com/files/172674/Bumsys-Business-Management-System-1.0.3-beta-Shell-Upload.html
- https://github.com/unilogies/bumsys/commit/a5beff7868ab63bf4ec752a1102f8da033c66b28
- https://huntr.dev/bounties/b5e9c578-1a33-4745-bf6b-e7cdb89793f7
Products affected by CVE-2023-0455
-
cpe:2.3:a:bumsys_project:bumsys:1.0.0
-
cpe:2.3:a:bumsys_project:bumsys:1.0.1
-
cpe:2.3:a:bumsys_project:bumsys:1.0.2